refresh_token shouldn't send Authorization header about oauthswiftalamofire

[Germandrummer92]

@neoneye If you take a look at https://tools.ietf.org/html/rfc6749#section-6, it does require an authorization header in the rfc IF the client was issued client credentials (which means, you HAVE a client_secret and not only a client_id, correct me if I'm wrong). So I think this is the correct behavior by oauthSwift.

This is the original wording in the rfc for refreshing an access token:

If the client type is confidential or
the client was issued client credentials (or assigned other
authentication requirements), the client MUST authenticate with the
authorization server

[neoneye]

@Germandrummer92 ok, thank you for answering this. I have forwarded your answer to my backend developer friend.